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CLAIMS: 



1 . An electric or electronic circuit arrangement (100) for protecting at least a chip 
arrangement (200), for example, at least a (semiconductor) chip arrangement, particularly at 
least a controller chip arrangement for a chip card or smart card, from manipulation and/or 
abuse, characterized by 

5 at least one, particularly optosensitive detector unit (10), whose output voltage 

(V 0 ut) is a measure of the incidence of light (Li) on the detector unit (10), and 

at least one comparator unit (20) preceded by the detector unit (10) provided 
for comparing the output voltage (V out ) of the detector unit (10) with a reference voltage 
(Vref), wherein the data and/or functions of the chip arrangement (200) to be protected can be 
1 0 temporarily or permanently obstructed and/or erased (L) and/or blocked (S) and/or 

interrupted in the case of a failure message occurring during comparison of the output voltage 
(Vout) of the detector unit (10) with the reference voltage (V ref ). 

2. A circuit arrangement (1 00) as claimed in claim 1 , characterized in that the 
1 5 detector unit (1 0) is arranged 

underneath the surface of the chip arrangement (200), particularly underneath 
at least an oxide layer of the chip arrangement (200), and/or 

substantially in the plane of the data and/or functions to be protected. 

20 3. A circuit arrangement (100) as claimed in claim 1 or 2, characterized in that 

the detector unit (10) comprises at least one bipolar transistor (12), particularly at least one 
pnp transistor. 

4. A circuit arrangement (100) as claimed in claim 3, characterized in that the 

25 detector unit (1 0) is constituted by a plurality or a large number of spatially arranged bipolar 
transistors (12). 
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5. , A circuit arrangement (100) as claimed in any one of claims 3 to 4, 

characterized in that the emitter (1 24) of the bipolar transistor (1 2) is connected to the input 
(22), provided for the output voltage (V ou t), of the comparator unit (20). 

5 6. A circuit arrangement (1 00) as claimed in any one of claims 3 to 5, 

characterized in that the emitter (124) of the bipolar transistor (12) is connected to at least a 
power supply voltage (V dd ) via at least a power supply resistor (14). 

7. A circuit arrangement (100) as claimed in any one of claims 3 to 6, 

10 characterized in that the collector (126) of the bipolar transistor (12) is connected to ground 
potential via at least a reference resistor (16). 

8. A circuit arrangement (100) as claimed in any one of claims 3 to 7, 
characterized in that the junction between the base (122) of the bipolar transistor (12) and the 

1 5 collector ( 1 26) of the bipolar transistor ( 1 2) is provided for absorbing the light incident on the 
detector unit (10). 

9. A circuit arrangement (100) as claimed in any one of claims 1 to 8, 
characterized in that the output voltage (V out ) of the detector unit (10) depends on the 

20 wavelength and/or the intensity of the incident light (Li). 

10. A circuit arrangement (1 00) as claimed in any one of claims 1 to 9, 
characterized in that 

at least an evaluation unit (30) is implemented and/or integrated in the 
25 comparator unit (20), or 

the comparator unit (20) precedes at least an evaluation unit (30). 

11. A circuit arrangement (1 00) as claimed in claim 1 0, characterized in that the 
evaluation unit (30) generates the failure message when the output voltage (V out ) of the 

30 detector unit ( 1 0) deviates from the nominal range. 

12. A circuit arrangement (100) as claimed in any one of claims 1 to 1 1, 
characterized in that 

the working point of the detector unit (10) and/or 
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the threshold value of the reference voltage (V re f) is adjustable. 

13. A circuit arrangement (100) as claimed in any one of claims 1 to 12, 

characterized in that at least a dielectric coating, particularly an insulation layer and/or 
5 passivation layer and/or a further protective coating which is provided for protecting the chip 
arrangement (200) from external influences and preferably cannot be easily removed is 
arranged within the chip arrangement (200) and/or laterally to the chip arrangement (200) 
and/or on the chip arrangement (200). 

10 14. A circuit arrangement (100) as claimed in claim 13, characterized in that the 

material of the dielectric coating is epoxy resin or silicon nitrite (SiN02) or silicon dioxide 
(SiCh), or other insulating materials used in the manufacture of semiconductors. 

15. A circuit arrangement (100) as claimed in claim 13 or 14, characterized in that 
15 the material of the dielectric coating is substantially opaque. 

1 6. A circuit arrangement (1 00) as claimed in any one of claims 1 to 15, 
characterized in that the chip arrangement (200) is arranged on at least a particularly layered 
carrier substrate of a semiconducting or insulating material. 

20 

17. A circuit arrangement (100) as claimed in any one of claims 1 to 16, 
characterized in that the circuit arrangement (100) is implemented and/or integrated in at 
least a card, particularly in at least a chip card or in at least a smart card. 

25 1 8. A card, particularly a chip card or smart card, comprising at least an electric or 

electronic circuit arrangement (100) as claimed in any one of claims 1 to 17. 

19. A chip arrangement (200), for example a (semiconductor) chip arrangement, 

particularly a controller chip arrangement for a chip card or smart card, the chip arrangement 
30 comprising 

at least one, preferably a plurality or a large number of particularly 
optosensitive detector units (10) as claimed in any one of claims 1 to 20, and 

at least a combination logic unit (40) for combining the detector units (10). 
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20. 1 A chip arrangement (200) as claimed in claim 19, characterized in that the 
combination logic unit (40) is connected to at least a control logic unit (50). 

21. A chip arrangement (200) as claimed in claim 1 9 or 20, characterized in that 
5 the combination logic unit (40) is connected to at least a particularly electrically erasable 

storage unit (60). 

22. A chip arrangement (200) as claimed in claim 21, characterized in that the 
storage unit (60) is constituted by at least an EEPROM storage unit (60') (EEPROM = 

1 0 Electrically Erasable Programmable Read-Only Memory), and the data and/or functions of 
the chip arrangement (200) to be protected are erasable (L) when a failure message by means 
of the EEPROM storage unit (60') occurs particularly during comparison of the output 
voltage (V out ) of the detector unit (10) with the reference voltage (V ref ). 

1 5 23. A chip arrangement (200) as claimed in claim 20, 2 1 or 22, characterized in 

that 

the storage unit (60) is arranged between the combination logic unit (40) and 
the control logic unit (50), and 

the access to the data and/or functions of the chip arrangement (200) to be 
20 protected can be blocked by blocking (S) the storage unit (60) when a failure message occurs 
particularly during comparison of the output voltage (V ou t) of the detector unit (10) with the 
reference voltage (V re f). 

24. A chip arrangement (200) as claimed in any one of claims 19 to 23, 

25 characterized in that the chip arrangement (200) can be permanently short-circuited via the 
power supply voltage (V d d), particularly via the power supply terminals of the chip 
arrangement (200). 

25. A method of protecting at least a chip arrangement (200), for example at least 
30 a (semiconductor) chip arrangement, particularly at least a controller chip arrangement for a 

chip card or smart card from manipulation and/or abuse, characterized in that 

an output voltage (V out ) determined by light (Li) incident on the detector unit 
(10) is generated in at least a particularly optosensitive detector unit (10), particularly in at 
least a bipolar transistor (12); 



PHDEO 10005 



14 14.12.2001 
the output voltage (V ou t) of the detector unit (10) is compared with a reference 
voltage (V re f) in at least a comparator unit (20) preceded by the detector unit (10), and 

the data and/or functions of the chip arrangement (200) to be protected are 
temporarily or permanently obstructed and/or erased (L) and/or blocked (S) and/or 
5 interrupted when a failure message is generated during comparison of the output voltage 
(Vout) of the detector unit (10) with the reference voltage (V re f). 

26. A method as claimed in claim 25, characterized in that the light incident on the 
detector unit (10) is substantially absorbed by means of the junction between the base (122) 

10 of the bipolar transistor (12) and the collector (126) of the bipolar transistor (12). 

27. A method as claimed in claim 25 or 26, characterized in that the failure 
message is triggered in the comparator unit (20) when the output voltage (V out ) of the 

II detector unit (10) deviates from the nominal range. 

Si 15 

[ Al 28. A method as claimed in any one of claims 25 to 27, characterized in that the 

p triggering of the failure message is adjusted by means of 

the working point of the detector unit (10) and/or 
=4 the threshold value of the reference voltage (V rcf ). 

T 20 

29. A method as claimed in any one of claims 25 to 28, characterized in that the 
failure message is generated in at least 

an evaluation unit (30) implemented and/or integrated in the comparator unit 

(20), or 

25 an evaluation unit (30) preceded by the comparator unit (20). 

30. A method as claimed in any one of claims 25 to 29, characterized in that at 
least a control logic unit (50) connected to at least a combination logic unit (40) provided for 
combining the detector units (10) is temporarily blocked (S) when the failure message is 

30 triggered. 



31. A method as claimed in any one of claims 25 to 29, characterized in that at 

least an electrically erasable storage unit (60) arranged between at least a combination logic 
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unit (40) provided for combining the detector units (10) and at least a control logic unit (50) 
is permanently blocked (S) when the failure message is triggered. 

32. A method as claimed in claim 3 1 , characterized in that the control logic unit 
5 (50) is temporarily or permanently blocked (S) by means of at least a "reset" (RS). 

33. A method as claimed in any one of claims 25 to 29, characterized in that a 
particularly once-electrically programmable storage unit (60) connected to at least a 
combination logic unit (40) provided for combining the detector units (10) is permanently 

10 blocked (S) when the failure message is triggered. 

34. A method as claimed in claim 33, characterized in that the power supply 
voltage (V<jd) is short-circuited by means of the storage unit (60), and particularly the power 
supply terminals of the chip arrangement (200) are short-circuited. 

15 

35. A method as claimed in any one of claims 25 to 29, characterized in that the 
data and/or functions to be protected are erased (L) in an EEPROM storage unit (60') 
(EEPROM = Electrically Erasable Programmable Read-Only Memory) connected to at least 
a combination logic unit (40) provided for combining the detector units (10) when the failure 

20 message is triggered. 



